I was also thinking, just because the person gives a pin number over the phone to ID themselves, doesn't mean it's the same pin that identifies the car. Hell it could be a 1000 bit encrypted key for all we know.